CVE-2026-116926: high-severity vulnerability in Microsoft Teams for Android
Microsoft Teams Spoofing Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft Teams for AndroidRelated CVEs — Microsoft Teams for Android
In the same product, most dangerous first.
CVE-2022-21965HIGHMicrosoft Teams Denial of Service VulnerabilityEPSS 3.0%CVE-2023-29328HIGHMicrosoft Teams Remote Code Execution VulnerabilityEPSS 2.2%CVE-2023-29330HIGHMicrosoft Teams Remote Code Execution VulnerabilityEPSS 2.0%CVE-2026-42835HIGHMicrosoft Teams for Android Information Disclosure VulnerabilityEPSS 1.3%CVE-2024-21448MEDIUMMicrosoft Teams for Android Information Disclosure VulnerabilityEPSS 1.2%CVE-2024-21374MEDIUMMicrosoft Teams for Android Information Disclosure VulnerabilityEPSS 1.0%